161 matches found
KLA90869 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Front Door can be exploited remotely to gain...
Microsoft Azure Functions Information Leakage Vulnerability
Microsoft Azure Functions is a hosted Platform-as-a-Service PaaS provider from Microsoft Corporation USA that delivers event-driven and scheduled compute resources for Azure cloud services. An information disclosure vulnerability exists in Microsoft Azure Functions, which can be exploited by an...
GHSA-5RRX-JJJQ-Q2R5 vulnerabilities
Vulnerabilities for packages: dotnet, dotnet-bootstrap, azure-functions-extension-bundles...
CVE-2025-55315 vulnerabilities
Vulnerabilities for packages: dotnet, dotnet-bootstrap, azure-functions-extension-bundles...
EUVD-2020-8862
Malware in sbrugna...
EUVD-2025-12758
Malicious code in bioql PyPI...
Malicious code in azure-functions-templates-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b042b6071c2aede4bcb5d299376c83daa1a911adb92cc27204804dba0b29dbc3 The OpenSSF Package Analysis project identified 'azure-functions-templates-build' @ 1.0.0 npm as malicious. It is considered malicious because: ...
MAL-2025-42126 Malicious code in azure-functions-templates-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b042b6071c2aede4bcb5d299376c83daa1a911adb92cc27204804dba0b29dbc3 The OpenSSF Package Analysis project identified 'azure-functions-templates-build' @ 1.0.0 npm as malicious. It is considered malicious because: ...
io.quarkiverse.operatorsdk:quarkus-operator-sdk (5.0.0.beta1), io.quarkiverse.operatorsdk:quarkus-operator-sdk-bundle-generator (5.0.0.beta1) +222 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.14.0.cr1)
io.quarkus:quarkus-vertx MAVEN version 2.14.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk 5.0.0.beta1 -...
io.quarkus:quarkus-amazon-lambda-http (2.16.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (2.16.0.cr1) +218 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.16.0.cr1)
io.quarkus:quarkus-vertx MAVEN version 2.16.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 2.16.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deployment...
io.quarkus:quarkus-amazon-lambda-http (2.10.4.final), io.quarkus:quarkus-amazon-lambda-http-deployment (2.10.4.final) +227 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.10.4.final)
io.quarkus:quarkus-vertx MAVEN version 2.10.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 2.10.4.final - io.quarkus:quarkus-amazon-lambda-http-deployment...
io.quarkus:quarkus-amazon-lambda-http (2.13.9.final), io.quarkus:quarkus-amazon-lambda-http-deployment (2.13.9.final) +157 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.13.9.final)
io.quarkus:quarkus-vertx MAVEN version 2.13.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 2.13.9.final - io.quarkus:quarkus-amazon-lambda-http-deployment...
io.quarkus:quarkus-amazon-lambda-http (2.10.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (2.10.0.cr1) +219 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.10.0.cr1)
io.quarkus:quarkus-vertx MAVEN version 2.10.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 2.10.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deployment...
io.quarkus:quarkus-amazon-lambda-http (2.15.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (2.15.0.cr1) +217 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (2.15.0.cr1)
io.quarkus:quarkus-vertx MAVEN version 2.15.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 2.15.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deployment...
Microsoft Azure Functions Data Forgery Issue Vulnerability
Microsoft Azure Functions is a hosted Platform-as-a-Service PaaS provider from Microsoft Corporation USA that provides event-driven and scheduled compute resources for Azure cloud services. Microsoft Azure Functions has a data forgery issue vulnerability that stems from improper cryptographic...
CVE-2025-33074
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...
CVE-2025-33074
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...
CVE-2025-33074
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...